Call of Duty Secure Attestation Wizard Explained

What the wizard checks

It scans your PC's BIOS information, to see whether it meets the security requirements of the Call of Duty games that need them. MW4 on PC needs both TPM 2.0 and Secure Boot. A PC without them cannot play any online mode, DMZ included. Secure Boot in turn needs three things:

• The PC starts in UEFI mode, not Legacy (also called CSM)
• The Windows drive uses the GPT partition style, not MBR
• Secure Boot is set to Enabled in the UEFI/BIOS

How to run it

1. Open Activision's help article (linked in the sources below) and download CODSecureAttestationWizard_1.3.0.zip.
2. Unzip it.
3. Double-click CODSecureAttestationWizard.exe.
4. Accept the terms and run the scan. The Settings option at the bottom changes the language.
5. Read the result: either “Your PC meets all security requirements”, or a list of the settings that still need work.

What each result means

• TPM 2.0: Not Enabled: Switch TPM on in the UEFI/BIOS: the setting is Intel PTT on Intel processors and AMD CPU fTPM on AMD. Save, restart, then check with tpm.msc.
• Secure Boot: Not Enabled: Set Secure Boot to Enabled, usually on the Boot tab of the UEFI/BIOS, then save and restart. Check with msinfo32.
• Boot Partition not set to GPT: Your Windows drive uses MBR. Convert it to GPT with Microsoft's MBR2GPT tool (Activision points to Microsoft's guide), switch the boot mode to UEFI, then turn on Secure Boot.
• BIOS Boot mode not set to UEFI: Change the boot mode from Legacy (CSM) to UEFI in the BIOS. Make sure the Windows drive is GPT first: on an MBR drive Windows may not start in UEFI mode.
• BIOS Firmware Update Required: You meet the minimum for now, but Activision recommends a BIOS update and says it may become required. Get it from your motherboard maker's support page.
• Authorization Key Failed: Select Generate Key in the wizard, then Yes on the Windows prompt for enrollaik.exe, so the scan can read your TPM.
• TCG Event Log Failed: Windows is not up to date. Restart the PC and install the latest Windows update.

Each fix, with how to check TPM 2.0, Secure Boot, UEFI and GPT yourself in Windows, is in our MW4 failed attestation fix.

The Generate Key prompt (enrollaik.exe)

If the result is Authorization Key Failed, select Generate Key: Windows then asks whether enrollaik.exe may make changes. Select Yes so the scan can read your TPM. On some AMD PCs with TPM firmware version 3.*.0.* (any numbers in place of the stars), the enrollaik.exe prompt keeps coming back even after you select Yes. Activision says that means the motherboard BIOS needs an update.

After the scan

• Once it reports “Your PC meets all security requirements”, Activision says you can delete the wizard.
• If you did every step and still get a Failed Attestation Status, Activision asks you to send a TPM incompatibility report from its help article; the reports help its engineers and hardware makers fix BIOS firmware.
• Activision warns that wrong UEFI/BIOS changes can stop a PC from starting, says to follow the motherboard maker's own instructions, and suggests asking the maker or a professional if you are unsure.

Before you buy or upgrade, check the rest of your PC against the MW4 system requirements; and if you get in but lag, the MW4 lag fix finds out whether it is your network or the servers.

Questions